Replay traps received from snmptrapd

2022-07-19 Thread Matt Hughes
I'm looking to capture/log traps on one machine via snmptrapd and then "replay" them back at a later time with snmptrap with a little help. I run snmptrapd -f -Lod -n -OnqX on the capture machine. And then I try to take one of those lines and run the parameters into snmptrap. How

Re: Snmptrapd: how to use snmpusm to manage users ?

2022-02-01 Thread Enrico Demarin
Hi Paul, yes I did - and it works well when managing "snmpd" users however it's not clear what needs to be passed to work on the snmptrapd users: *-CE ENGINE-IDSet usmUserEngineID to be used as part of the index of the usmUserTable. Default is to use the contextEngineID (set v

Re: Snmptrapd: how to use snmpusm to manage users ?

2022-02-01 Thread Paul Herring
I am facing an issue where we want to add SNMP v3 users to the snmptrapd > database without restarting the daemon. > > The http://www.net-snmp.org/wiki/index.php/TUT:snmptrap_SNMPv3 guide > shows examples on how to add the user "statically" to the snmptrapd.conf, > how

Snmptrapd: how to use snmpusm to manage users ?

2022-01-31 Thread Enrico Demarin
Hello All, I am facing an issue where we want to add SNMP v3 users to the snmptrapd database without restarting the daemon. The http://www.net-snmp.org/wiki/index.php/TUT:snmptrap_SNMPv3 guide shows examples on how to add the user "statically" to the snmptrapd.conf, however it'

snmptrapd: Traps from appliance not being logged

2021-07-07 Thread Adeline Whipple
Hello there, I have a CentOS 7 host with the CentOS 7 RPM 'net-snmp-5.7.2-49.el7.x86_64' installed. I have snmptrapd running on this host, listening on 162/udp, and receiving traps from various other hosts successfully. These traps are logged through syslog (using 'authCommun

Re: snmptrapd queue+retry

2021-05-06 Thread Wes Hardaker via Net-snmp-users
Feroz writes: > I tried as follows,  serverRecvBuf and  serverSendBuf worked, but > timeout/retries didn't work. > > [snmp] timeout 10 > [snmp] retries 60 So if you're forwarding via traps, timeouts and retries make no sense since they're not acknowledged by the remote server. There is no way

Re: snmptrapd queue+retry

2021-05-05 Thread Feroz
are what you need, put them inside the snmptrapd.conf file with > a [snmp] tag before them: > > [snmp] > serverRecvBuf ... > serverSendBuf ... > > [snmptrapd] > # rest of file > -- > Wes Hardaker > Please mail all replies to net-snmp-cod...@lists.sourceforge.net >

Re: snmptrapd queue+retry

2021-04-29 Thread Wes Hardaker via Net-snmp-users
p] tag before them: [snmp] serverRecvBuf ... serverSendBuf ... [snmptrapd] # rest of file -- Wes Hardaker Please mail all replies to net-snmp-cod...@lists.sourceforge.net ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following pa

snmptrapd queue+retry

2021-04-28 Thread Feroz
hi, Is it possible for snmptrapd to buffer/queue the TRAP's and INFORM's and perform retry in case of failure to forward them to the destination? I see "serverRecvBuf", "serverSendBuf","retries" but they don't seem to work, when used in

RE: snmptrapd for V3 informs

2021-01-13 Thread Atkins, Brian
secure config file (/var/lib/snmp/snmptrapd.conf and /var/lib/snmp/snmpd.conf on my Debian 10 host using the stock Debian snmptrapd package, version 5.7.3), where they get converted to usmUser directives with encoded auth and priv passwords. Note, this conversion happens on shutdown of snmpd or

Re: snmptrapd for V3 informs

2021-01-12 Thread Feroz
hi Brain, Thanks a lot for your response.. here is what I tried but that doesnt seems to be working... I tried adding token "engineID " in snmptrapd.conf and used the same engineID while in createUser directive, even that didnt worked. Is there a different method to get engineID for

RE: snmptrapd for V3 informs

2021-01-06 Thread Atkins, Brian
I don’t have one handy, but keep in mind that the engineID used to encode the usmUser credentials, for both snmptrapd and the agent, is the one for snmptrapd itself, not the agent sending the INFORM: With SNMPv3 informs, the authoritative engine ID is the engine that receives the inform

RE: snmptrapd for V3 informs

2021-01-06 Thread Joan Landry
Sent: Wednesday, January 6, 2021 10:11 AM To: net-snmp-users@lists.sourceforge.net Subject: snmptrapd for V3 informs External email: [net-snmp-users-boun...@lists.sourceforge.net] Anyone tried forwarding V3 informs with snmptrapd? Can some one share the snmptrap

snmptrapd for V3 informs

2021-01-06 Thread Feroz
Anyone tried forwarding V3 informs with snmptrapd? Can some one share the snmptrapd.conf file? -Feroz ___ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https

Need help in forwarding SNMPv3 informs with snmptrapd

2020-12-09 Thread Feroz
eroz123 DES feroz123 authUser log,net feroz priv root@Ubuntu3323# *Start snmptrapd on VM1* root@Ubuntu3323:# /usr/sbin/snmptrapd -f -C -c /tmp/snmptrapd.conf -Lo -d -Dusm,snmptrapd,sess_async_send & *Generate link-up notification on VM1.* root@Ubuntu3323:# snmpinform -Ci -v 3 -a SHA -A feroz1

AW: snmptrapd: Community-String not always passed to handler script

2020-06-09 Thread Markus Reusch
@lists.sourceforge.net Betreff: [Attention! Possible phishing attempt!] AW: snmptrapd: Community-String not always passed to handler script Hi Bill, thanks a lot for this solution – I tried it out and it works! ☺ Cheers Markus Von: Bill Fenner [mailto:fen...@gmail.com] Gesendet: Dienstag, 9. Juni 2020 16

AW: snmptrapd: Community-String not always passed to handler script

2020-06-09 Thread Markus Reusch
Hi Bill, thanks a lot for this solution – I tried it out and it works! ☺ Cheers Markus Von: Bill Fenner [mailto:fen...@gmail.com] Gesendet: Dienstag, 9. Juni 2020 16:46 An: Markus Reusch Cc: net-snmp-users@lists.sourceforge.net; Daniel Koller Betreff: Re: snmptrapd: Community-String not

Re: snmptrapd: Community-String not always passed to handler script

2020-06-09 Thread Bill Fenner
Reading the 5.8 source, it looks like the "traphandle" directive accepts an undocumented "-F" argument - try traphandle -F "CommOrSecret=%u" default /appl/snmp/bin/handler.sh (Obviously you will need to play with the format to get the other information into it too) Bill On Thu, Jun 4, 2020 a

AW: snmptrapd: Community-String not always passed to handler script

2020-06-04 Thread Markus Reusch
Hello list, sorry to bump this up. Anyone got an idea how to enforce passing the community-string to the handler script? Cheers Markus - Hello list, we wrote a handler script that relies on getting the community-string as we the script uses this

snmptrapd: Community-String not always passed to handler script

2020-05-25 Thread Markus Reusch
Hello list, we wrote a handler script that relies on getting the community-string as we the script uses this to generate an event and route it to the correct recipients. Usually for "real" traps sent by different devices, we can see the community-string in the snmptrapd.log. For test traps we s

Re: Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2020-01-07 Thread Anders Wallin
problem! > > You should think more then twice before using TLS/DTLS. > The code is full of bugs and design issues (like sending traps before > checking hostnames etc) and it's using deprecated version of TLS. > > Regards > Anders Wallin > > > On Wed, Nov 27, 2019 at

snmptrapd output to traphandler does not contain datatype info.

2019-12-03 Thread Ben Kinsella
I raised this issue on GitHub before I realised that this mailing list existed: https://github.com/net-snmp/net-snmp/issues/47 I am using a traphandle directive to send the output of snmptrapd to an external Python program. The Python script creates a JSON object and publishes on MQTT, and

Re: Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2019-11-29 Thread Bart Van Assche
On Wed, Nov 27, 2019 at 9:33 PM Larry Hayes <lhay...@gmail.com> wrote: It is even worse with TLS. When the snmptrapd is restarted without restarting the

Re: Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2019-11-27 Thread Anders Wallin
Hayes wrote: > It is even worse with TLS. > > When the snmptrapd is restarted without restarting the snmpd: > > kill the snmptrapd: > > From the snmpd logs: snmpd detects the connection close. > > Nov 27 14:23:51 apcon-ubuntu snmpd[22569]: tlstcp: > Nov 27 14:23:51 apc

Re: Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2019-11-27 Thread Larry Hayes
It is even worse with TLS. When the snmptrapd is restarted without restarting the snmpd: kill the snmptrapd: >From the snmpd logs: snmpd detects the connection close. Nov 27 14:23:51 apcon-ubuntu snmpd[22569]: tlstcp: Nov 27 14:23:51 apcon-ubuntu snmpd[22569]: remote side closed connect

Behavior of snmptrapd and snmpd when using certificates (TSM, DTLS)

2019-11-20 Thread Larry Hayes
Hello, I am using net-snmp v5.8 r0. I think I have successfully configured an snmpd server to generate V3 Traps/Informs using TSM with certificates and have an snmptrapd receive those V3 Traps/Informs. As I can see the Trap/Infom data dumped to the window snmptrapd is running. My issue is, when

snmptrapd hostname lookups

2019-07-10 Thread Drew Weaver
Hi All, I've done some Googling on this topic but everything I have seen looks pretty old so I figured I would just go ahead and ask. Is there any way to make snmptrapd do a DNS lookup to get a useful system name when it receives a trap? If not a DNS lookup is there a way to just sp

Re: snmptrapd - Authentication failed

2019-05-14 Thread Dave C
So now I understand that net-snmp stores persistent data regarding engines and credentials in some numerical hex representation as usmUser records. These files seems to be created when the snmptrapd service is shutdown. I figured this out when I changed the password on the server (snmptrapd) only

Re: snmptrapd - Authentication failed

2019-05-12 Thread Dave C
Sorry typo the error reads. May 13 11:52:16 WIK5 snmptrapd[22267]: Authentication failed for ZDART On Mon, May 13, 2019 at 2:21 PM Dave C wrote: > Please help - going crazy. > > I have a server and a remote agent. The agent is generating v3 traps that > are delivered back to the s

snmptrapd - Authentication failed

2019-05-12 Thread Dave C
Please help - going crazy. I have a server and a remote agent. The agent is generating v3 traps that are delivered back to the server. For a long while I had used some random credentials (that worked), now I when I change them I get "Authentication failed" in snmptrapd service.

Re: snmptrapd and snmpv3 informs from Junos

2019-02-28 Thread Anders Wallin
Hi, don't know if it's a negotiation but I think need to have the engineID set in the inform message I have appended a tarball with messages, conf,logs and pcap from where I did run a similar test with snmpd and snmptrapd. The conf files includes a bunch of other stuff not needed for

Re: snmptrapd and snmpv3 informs from Junos

2019-02-28 Thread Dag Bakke
llin wrote: > Hi Dag, > > try to not set the engineID in the snmptrapd.conf and let snmptrapd > and Junos negotiate the engineID > > createUser -e 0x80001234 authpriv2 SHA xyzzy188 AES xazzza18 > -> > createUser  authpriv2 SHA xyzzy188 AES xazzza18 > > Looking at

Re: snmptrapd and snmpv3 informs from Junos

2019-02-28 Thread Anders Wallin
Hi Dag, try to not set the engineID in the snmptrapd.conf and let snmptrapd and Junos negotiate the engineID createUser -e 0x80001234 authpriv2 SHA xyzzy188 AES xazzza18 -> createUser authpriv2 SHA xyzzy188 AES xazzza18 Looking at the pcap file snmptrapd sends the engineid = 80001f88.,

snmptrapd and snmpv3 informs from Junos

2019-02-28 Thread Dag B
Hi. I am trying to convince snmptrapd to receive snmp v3 informs from Junos (Juniper Networks' BSD-variant on switches and firewalls). The idea was to use informs rather than traps, so I could : - have encryption in place. - avoid having to update the snmptrapd config for every new d

snmptrapd forward option

2018-09-11 Thread jayshankar nair
Hi, SNMP trap is sent to default port 162. The application needs to run as root user. Currently, i have requirement that my application runs as non-root user. In snmptrapd there is forward option, which allows trap to be forwarded to another port. The forward option seems to have issues. It

Help me answer few queries on Snmptrapd

2018-05-13 Thread Kaleemulla Sharief (kasharie)
Hi All, Can anyone help me answer few queries on using snmptrapd to log the incoming snmp v3 traps. 1. Is there an alternative way to support/authorize V3 traps apart from adding the entries in snmptrapd.conf to createuser with engine id, Auth and priv protocol and passwords. 2. Question

snmptrapd causes port exhaustion?

2018-02-06 Thread Con Nie Ong
Hi all, I am currently using the Windows version of net-snmp 5.7.3. We are currently using the snmptrap daemon to process traps from our network devices. The windows desktop that runs this snmptrap daemon 24x7x365 and sends out emails containing the trap information. We suspect that the snmptrap d

snmptrapd stops receiving packets after sometime when type net and forward option is enabledAs per the requirement, i did the snmptrapd configuration with forwarding option.After receiving couple of t

2018-01-19 Thread jayshankar nair
Hi, As per the requirement, i did the snmptrapd configuration with forwarding option.After receiving couple of traps the snmptrapd stalls i.e log option stops working. Once the forwarding option is disabled, snmptrapd receives normal trap. [root@localhost tmp]# more snmptrapd.conf authCommunity

Re: snmptrapd unable to receive v2 traps

2018-01-18 Thread jayshankar nair
Hi, Below setup is working fine. I have done iptables setup. Hence packets were not redirected to port 162. Thanks, Jayshankar On Fri, Jan 19, 2018 at 11:10 AM, jayshankar nair wrote: > Hi, > snmptrapd is unable to receive v2 traps. My configuration are as below. > >

snmptrapd unable to receive v2 traps

2018-01-18 Thread jayshankar nair
Hi, snmptrapd is unable to receive v2 traps. My configuration are as below. more /tmp/snmptrapd.conf authCommunity log,execute,net public. Then i run snmptrapd ./snmptrapd -f -C -c /tmp/snmptrapd.conf -Le -d NET-SNMP version 5.7.1. Then i sent v2 traps from another terminal. But snmptrapd

Re: Trap event not passing snmptrapd

2017-10-09 Thread Bill Fenner
Per https://tools.ietf.org/html/rfc3416#section-4.2.6, "The first two variable bindings ... are sysUpTime.0 and snmpTrapOID.0". Your trap contains sysUpTime.0 and snmpTrapEnterprise (with no instance ID, making it invalid anyway). So, snmptrapd is probably just discarding it bec

Re: Trap event not passing snmptrapd

2017-10-06 Thread Ilya Etingof
) > On 6 Oct 2017, at 11:23, marian szczepkowski wrote: > > We have a small device that send a trap on events I have configured > anmptrapd to pass traps generated manually but snmptrapd doesn't pass > the events generated by our devices the event doesn't show up when run

Trap event not passing snmptrapd

2017-10-06 Thread marian szczepkowski
We have a small device that send a trap on events I have configured anmptrapd to pass traps generated manually but snmptrapd doesn't pass the events generated by our devices the event doesn't show up when run with -d so I'm guessing it's some thing fundamental. The following is

snmptrap and value in quotes. The snmptrapd deletes quotes

2017-05-17 Thread Дмитрий Зиновьев
'' '' 1.3.6.1.2.1.1.5 s "Some host name" Apr 21 13:41:32 65_test snmptrapd[30680]: 2017-04-21 13:41:32 192.168.124.28(via UDP: [127.0.0.1]:43906->[127.0.0.1]) *SNMPv2-MIB::sysName = STRING: Some host name* snmptrap -v 1 -c public localhost '' '&

snmptrapd processing traps from only one agent

2017-05-17 Thread Vinayagar Karpagam
Hi all, I’m facing an issue with the snmptrapd (in RHEL 7), in which the traps sent from only one of the agents is being logged/processed by snmptrapd. I’m using snmp v5.7.2 and using snmptrapgen.exe to generate the test trap. I’m using the exact command to generate the test trap in both the

Re: help needed on net-snmp's snmptrapd issue

2017-05-17 Thread Pushpa Thimmaiah
Hi Song Han, It looks like snmptrapd.conf persistent file doesnot have entry(usm_entry) for snmpv3 user pasitaes_inform You can try following steps 1. Stop snmptrapd 2. Remove all usm_entries or usm_entry of pasitaes_inform in persistent snmptrapd.conf 3. Start snmptrapd Now snmptrapd write

snmptrap and value in quotes. The snmptrapd deletes quotes

2017-05-11 Thread Дмитрий Зиновьев
'' '' 1.3.6.1.2.1.1.5 s "Some host name" Apr 21 13:41:32 65_test snmptrapd[30680]: 2017-04-21 13:41:32 192.168.124.28(via UDP: [127.0.0.1]:43906->[127.0.0.1]) *SNMPv2-MIB::sysName = STRING: Some host name* snmptrap -v 1 -c public localhost '' '&

help needed on net-snmp's snmptrapd issue

2017-03-30 Thread Song Song1 Han
Hi all, currently I am setting up a snmp trap server to do some testing on the snmp trap sending from our devices.. Snmp trap message can be received with �Cd option , but it seems snmptrapd didn’t process this message. And I got such errors with �CD. is there anything wrong or missed ? thanks

snmptrapd configuration - sending inform traps

2016-10-06 Thread Diego Alfredo Flores
HI Guys, Im doing my experience with snmptrapd I need to receive and send traps. I receive traps v1,v2 and I want to send inform traps So , I m tryintg to find the good config of snmptrapd to do that This is my config more ./etc/snmp/snmptrapd.conf disableAuthorization yes authCommunity log

snmptrapd should accept all traps

2016-09-07 Thread Paul Jaehne
engineID created from their MAC, so all engineIDs are different. *My problem:* With the old version I could receive all traps, no matter of the engineID. With the new version of the snmptrapd, they are not accepted any more as described in man snmptrapd.conf "*Previously, snmptrapd would accep

Re: Need help with snmptrapd command

2016-07-19 Thread Hemanth Kumar
IB::demotraps SNMPv2-MIB::sysLocation.0 s "some message" > > > > By default, the following command does not require the port number to be > > mentioned when the snmptrapd is using the default port-161. > > snmptrap -v 2c -c rscommunity "" > > TRA

Re: Need help with snmptrapd command

2016-07-19 Thread Hemanth Kumar
> information added. Put the snmptrap shell script somewhere in the path > ahead of the real net-snmp executable. > > > > Alan > > > > *From:* Hemanth Kumar [mailto:hemanthn...@gmail.com] > *Sent:* Tuesday, July 19, 2016 5:20 AM > *To:* net-snmp-users@lists.sourc

Re: Need help with snmptrapd command

2016-07-19 Thread Lee
is receiving the > trap when the custom port number is mentioned > snmptrap -v 2c -c rscommunity :166 "" > TRAP-TEST-MIB::demotraps SNMPv2-MIB::sysLocation.0 s "some message" > > By default, the following command does not require the port number to be > mentione

RE: Need help with snmptrapd command

2016-07-19 Thread Robson, Alan
net-snmp executable. Alan From: Hemanth Kumar [mailto:hemanthn...@gmail.com] Sent: Tuesday, July 19, 2016 5:20 AM To: net-snmp-users@lists.sourceforge.net Subject: Need help with snmptrapd command HI, I am trying to figure out a way by which I can send following trap command without adding

Need help with snmptrapd command

2016-07-19 Thread Hemanth Kumar
.0 s "some message" By default, the following command does not require the port number to be mentioned when the snmptrapd is using the default port-161. snmptrap -v 2c -c rscommunity "" TRAP-TEST-MIB::demotraps SNMPv2-MIB::sysLocation.0 s "some message" Additi

RE: IPv6 and snmptrapd not processing traps

2016-04-15 Thread Gorman, Kevin
: IPv6 and snmptrapd not processing traps I've been working with Kevin on this issue and I have more detailed information. I've been testing IPv6 traps and I am confused about how the trap is being received and processed, compared to IPv4 traps (I suspect there is a bug). Here is an ipv4 t

RE: IPv6 and snmptrapd not processing traps

2016-04-15 Thread Troy Lea
ith net-snmp due to observation of the (debug) logging. I start snmptrapd with the following command: snmptrapd -DALL -f -Lo udp:162 udp6:162 -c /etc/snmp/snmptrapd.conf In another ssh session I execute the following commands: snmptrap -v 2c -c public 127.0.0.1 '

RE: IPv6 and snmptrapd not processing traps

2016-04-14 Thread Gorman, Kevin
Hi, This was resolved by updating /etc/sysconfig/snmptrapd. I had it set as follows: OPTIONS="-a -A -Lf /var/log/snmptrapd.log -p /var/run/snmptrapd.pid udp:162,udp6:162" The comma toward the end is the problem. Apparently, the comma is correct if this is defined in snmptrapd.conf,

IPv6 and snmptrapd not processing traps

2016-04-07 Thread Gorman, Kevin
thing that caught my eye. # ps -ef | grep snmptrapd | grep -v grep root 14576 1 0 20:35 ? 00:00:00 /usr/sbin/snmptrapd -a -A -Lf /var/log/snmtrapd.log -On -p /var/run/snmptrapd.pid udp:162,udp6:[::1]:162 # netstat -an | grep ":162 " udp 0 0 0.0.0.0:162 0.0.0.0:* udp 0 0 ::1:162 :::* #

Configure snmptrapd for IPv6?

2016-04-01 Thread Gorman, Kevin
In reading the snmptrapd man page, it refers to the snmpd manpage for configuring it to listen on IPv6 interfaces for traps over IPv6. I see the traps arrive on the interface with tcpdump. I tried adding the following (one at a time) to snmptrapd.conf and restarting snmptrapd. No errors but

snmptrapd : Authentication failed for

2016-03-29 Thread Kenan Ayalp
I have a python script (using pysnmp lib) running on a real device with Ubuntu 14.04 LTS which do internal polling. It sends keepalives and SNMPv3 Traps to Nagios. Snmptrapd is receiving traps and passing it to Snmptt, which works very well. Ive been trying the same scenario in VirtualBox with

snmptrapd can't forwarding

2016-03-19 Thread andrewarnier
Hi all, I am currently attempting to configure snmptrapd to do trap forwarding.With my current configuration, snmptrapd is receiving and logging incoming traps, but it it does not appear to be forwarding them. The contents of my snmptrapd.conf file are as follows: disableAuthorization

Re: snmptrapd snmp v3 fails on long engine id

2016-03-19 Thread Brian Fernald
Thimmaiah Date: Thursday, March 10, 2016 at 2:30 AM To: Brian Fernald Cc: "net-snmp-users@lists.sourceforge.net" Subject: Re: snmptrapd snmp v3 fails on long engine id Hi Brian, Trap persistent configuration available in /var/net-snmp/snmptrad.conf or /var/lib/snmp/snmptrapd.conf

Re: snmptrapd snmp v3 fails on long engine id

2016-03-10 Thread Pushpa Thimmaiah
rtunately. > > Thanks much, > Brian > > > From: Pushpa Thimmaiah > Date: Monday, March 7, 2016 at 4:19 AM > To: Brian Fernald > Cc: "net-snmp-users@lists.sourceforge.net" < > net-snmp-users@lists.sourceforge.net> > Subject: Re: snmptrapd snmp v3 fa

Re: snmptrapd snmp v3 fails on long engine id

2016-03-07 Thread Brian Fernald
ists.sourceforge.net>" mailto:net-snmp-users@lists.sourceforge.net>> Subject: Re: snmptrapd snmp v3 fails on long engine id Hi Brian, Can you paste usmUser entries for that configuration . Its available in snmp persistent file. Its better to use different usernames Thanks, Pushpa

Re: snmptrapd snmp v3 fails on long engine id

2016-03-07 Thread Pushpa Thimmaiah
; > I have a network device that generates EngineIDs such as this one : > 80001F8804303039343031303131313331 > > > > > My snmptrapd.conf has: > > > *createUser -e 0x80001F8804303039343031303131313331 econv3_admin SHA > test12345 AES test12345* > > *authuser log

snmptrapd snmp v3 fails on long engine id

2016-03-04 Thread Brian Fernald
Restarting snmptrapd results in : No log handling enabled - turning on stderr logging registered debug token snmptrapd, 1 registered debug token usm, 1 registered debug token usmUser, 1 snmptrapd: Freeing trap handler lists usmUser: created a new user econv3_admin at 80 00 1F 88 04 30 30

snmptrapd to mySQL (all variables)

2016-02-15 Thread Igor Mironov
Hello! I have setup net-snmp with MySQL logging and I get all traps in mySQL-table. I am also logging traps in text-file and use traptoemail as a trap-handler for email-notifications. Everything works fine except one: In my text-logs and email-notifications I got "full" trap-messages like:

Re: snmptrapd forwarding

2015-12-16 Thread Pik Master
Hi. This thread is coming up periodically, SNMP trap forwarding is not preserving the original sender's IP address. I created a patch, to enable special mode, which adds the IP of sender on each forwarder, so at the end of the chain the original sender's IP is in OID .1.3.6.1.6.3.18.1.3.0 (SNMP

Re: Forward SNMPv3 traps from snmptrapd to snmpc

2015-10-05 Thread Pranesh Kulkarni
instead of 127.0.0.1 give actual IP address On Thu, Sep 3, 2015 at 12:11 PM, Sanjay Singh wrote: > How can i forward the Traps received by SNMPTRAPd to SNMPc (Castle Rock > Manager) Both are running on the same machine (Windows 7) > > My entry for snmptrapd.conf is: > > au

Re: Forward SNMPv3 traps from snmptrapd to snmpc

2015-10-05 Thread Pushpa Thimmaiah
like 'forward default localhost:portnumber' > Eg: forward default 127.0.0.1:4477 > > > > On Thu, Sep 3, 2015 at 12:11 PM, Sanjay Singh > wrote: > >> How can i forward the Traps received by SNMPTRAPd to SNMPc (Castle Rock >> Manager) Both are running on the same machine

Re: Forward SNMPv3 traps from snmptrapd to snmpc

2015-10-05 Thread Pushpa Thimmaiah
Hi Sanjay Singh, Try with adding port number like 'forward default localhost:portnumber' Eg: forward default 127.0.0.1:4477 On Thu, Sep 3, 2015 at 12:11 PM, Sanjay Singh wrote: > How can i forward the Traps received by SNMPTRAPd to SNMPc (Castle Rock > Manager) Both are run

Re: snmptrapd does not show any logs

2015-09-28 Thread Pranesh Kulkarni
starting snmptrapd *# snmptrapd -Lf /tmp/snmptraps.log* *#/etc/init.d/snmpd restart* *# cat /tmp/snmptraps.log* NET-SNMP version 5.7.2.1 AgentX subagent connected NET-SNMP version 5.7.2.1 2015-09-28 15:59:45 localhost [UDP: [127.0.0.1]:35283->[127.0.0.1]:162]: DISMAN-EVENT-

snmptrapd does not show any logs

2015-09-28 Thread Vineela Tada
Hi, I am trying to enable debug logs or logs as such in general for snmptrapd. After i start my snmptrapd service and send some test SNMP packets, I do not see any logs being generated in the log file. Following is the command to start the snmptrapd - snmptrapd -u -Of -Ot -C -c -m ALL -M

Forward SNMPv3 traps from snmptrapd to snmpc

2015-09-02 Thread Sanjay Singh
How can i forward the Traps received by SNMPTRAPd to SNMPc (Castle Rock Manager) Both are running on the same machine (Windows 7) My entry for snmptrapd.conf is: authUser log,execute,net myuser forward default 127.0.0.1 I am sending the trap like: snmptrap -Ddumph_send,dumpv_send,usm -v 3 -e

net-snmp-5.7.3 snmptrapd issues in hpux

2015-05-11 Thread Dixon Xavier
ed-perl=no' '--with-openssl=/home/dixon/HPUX11.23_IPF64/release' '--enable-static=yes' '--enable-shared=no' '--prefix=/home/dixon/buildoutput_hpuxia64' 'CC=cc +DD64' 'CFLAGS=+DD64' But i am not able to get snmptrapd working. snmptrapd is

Re: snmptrapd and reverse DNS lookups

2015-04-28 Thread Wes Hardaker
Troy Lea writes: > But that still makes me think, how many times does snmptrapd attempt > to perform the DNS lookup? It should be once per packet, possibly twice if it's looking up both sides of the connection. (he says without diving into the code to be sure) > Is this num

snmptrapd and reverse DNS lookups

2015-04-01 Thread Troy Lea
I've been troubleshooting a problem for a customer for a while now where it takes about 4-5 hours for a trap received by snmptrapd to be placed into the snmptt spool folder. Today I think I've identified that DNS lookups are the cause of the delay. I've compared an strace

Re: snmptrapd and mysql

2015-01-27 Thread Gilbert Gutierrez
et to 1 to immediately write to the database sqlMaxQueue 140 # seconds between periodic queue flushes sqlSaveInterval 9 /root/.my.cnf: [snmptrapd] user=root password=somepassword host=localhost /var/log/messages Jan 27 15:13:50 localhost snmptrapd[2532]: 2015-01-27 15:13:50 [UDP: [172

snmptrapd and mysql

2015-01-27 Thread Gilbert Gutierrez
e 140 # seconds between periodic queue flushes sqlSaveInterval 9 /root/.my.cnf: [snmptrapd] user=root password=somepassword host=localhost /var/log/messages Jan 27 15:13:50 localhost snmptrapd[2532]: 2015-01-27 15:13:50 [UDP: [172.16.6.12]:65534->[172.16.5.140]:162]: DISMAN-E

snmptrapd TCP vs UDP for hostname

2015-01-26 Thread Aly Khimji
same in terms of payload, the host name either isn't received? or is not passed to snmptrapd? I am not sure. This is posing a problem for processing the trap as the host name is missing. I am aware we can do some extra processing to resolve the IP to a host name in a post processing fashion and pa

Re: snmptrapd: Verify trapversion of incoming traps

2014-12-29 Thread Pushpa Thimmaiah
. Therefore you get similar output > in cases 2 and 3. > > Thanks, > Dharm > > On Mon, Dec 29, 2014 at 11:49 AM, Pushpa Thimmaiah < > pushpa.thimma...@gmail.com> wrote: > >> Hi Folks, >> >> Can anybody tell me how can I check version(snmp2c/3) of recei

Re: snmptrapd: Verify trapversion of incoming traps

2014-12-28 Thread Dharm S
AM, Pushpa Thimmaiah < pushpa.thimma...@gmail.com> wrote: > Hi Folks, > > Can anybody tell me how can I check version(snmp2c/3) of received traps by > 'snmptrapd' ? > > Settings: > runnging snmpd, snmptrapd and snmptrap on same system (localhost) &g

snmptrapd: Verify trapversion of incoming traps

2014-12-28 Thread Pushpa Thimmaiah
Hi Folks, Can anybody tell me how can I check version(snmp2c/3) of received traps by 'snmptrapd' ? Settings: runnging snmpd, snmptrapd and snmptrap on same system (localhost) *CASE 1: SNMPv1* send snmpv1 trap ---> snmptrap -v 1 -c public localhost .1.3.6.1.4.1.8072.2.3.1

SNMP V3 forwarding with SNMPTRAPD.

2014-12-03 Thread Timothy Blain
I know this issues has been talked about before but I am unable to find the resolution. I apologize if I over looked it. I simply want to to use SNMPTRAPD to receive traps, log them to a file, and forward them on to our NMS server. The problem I have is the original source IP is lost. I have

SNMPv3 Traps and snmptrapd

2014-10-14 Thread mike
Hello Everyone, I have a bunch of Cisco switches from which I'm collecting SNMPv3 traps. The traps come in fine, but I have to manually add the EngineID to the /etc/snmp/snmptrapd.conf. If I don't add the EngineID, it will fail silently. I can see the Engine IDs which are failing if I use -Du

Re: snmptrapd not processing v3 traps

2014-10-08 Thread Bill Fenner
o.com] > Sent: 06 October 2014 10:34 > To: Jason Pope; 'Bill Fenner' > Cc: net-snmp-cod...@lists.sourceforge.net; > net-snmp-users@lists.sourceforge.net > Subject: RE: snmptrapd not processing v3 traps > > Jason, > > Would you mind expanding on this. Would yo

RE: snmptrapd not processing v3 traps

2014-10-06 Thread Jason Pope
From: Geoff Kingsmill [mailto:gkingsm...@yahoo.com] Sent: 06 October 2014 10:34 To: Jason Pope; 'Bill Fenner' Cc: net-snmp-cod...@lists.sourceforge.net; net-snmp-users@lists.sourceforge.net Subject: RE: snmptrapd not processing v3 traps Jason, Would you mind expanding on this. Woul

RE: snmptrapd not processing v3 traps

2014-10-06 Thread Geoff Kingsmill
2014 6:47 PM To: Jason Pope; Bill Fenner Cc: net-snmp-cod...@lists.sourceforge.net; net-snmp-users@lists.sourceforge.net Subject: RE: snmptrapd not processing v3 traps Ok … I have got it to work. I forgot to add in the authUser line :-P Also set it up without the engine ID and it works

RE: snmptrapd not processing v3 traps

2014-10-06 Thread Jason Pope
...@lists.sourceforge.net; net-snmp-users@lists.sourceforge.net Subject: RE: snmptrapd not processing v3 traps Bill, I had a look at the doc and no matter what I have done it still does not seem to work. I have tried multiple combinations of engineID with a 0x and not in front. Putting the Id in or not

RE: snmptrapd not processing v3 traps

2014-10-06 Thread Jason Pope
[mailto:fen...@gmail.com] Sent: 03 October 2014 21:16 To: Jason Pope Cc: net-snmp-cod...@lists.sourceforge.net; net-snmp-users@lists.sourceforge.net Subject: Re: snmptrapd not processing v3 traps On Fri, Oct 3, 2014 at 11:06 AM, Jason Pope mailto:jp...@bats.com>> wrote: Hi, Has anyone succes

Re: snmptrapd not processing v3 traps

2014-10-03 Thread Bill Fenner
On Fri, Oct 3, 2014 at 11:06 AM, Jason Pope wrote: > Hi, > > > > Has anyone successfully set up snmptrapd to accept v3 traps from a device ? > > > > I have tried to set it up, but I see nothing in the log when the device > sends v3 traps. When configured to send v2

Re: snmptrapd not processing v3 traps

2014-10-03 Thread Mike Krauss
about how it worked. I have never seen an answer on this list before so I don't think many people know. On Fri, Oct 3, 2014 at 11:06 AM, Jason Pope wrote: > Hi, > > > > Has anyone successfully set up snmptrapd to accept v3 traps from a device ? > > > > I have tried to

snmptrapd not processing v3 traps

2014-10-03 Thread Jason Pope
Hi, Has anyone successfully set up snmptrapd to accept v3 traps from a device ? I have tried to set it up, but I see nothing in the log when the device sends v3 traps. When configured to send v2 traps you can see them in the logs. I have set up the createUser line in the snmptrapd.conf file

snmptrapd snmpv3 trap forwarding

2014-08-31 Thread Geoff Kingsmill
NET-SNMP version 5.7.2.1. I currently have an snmp trap relay configured for SNMPv1. All configured devices send traps to the trap relay. The trap relay running snmptrapd then forwards these traps to the required trap receivers. This all works nicely. I now have a security requirement to

snmptrapd problem

2014-08-23 Thread Muharrem AYDIN
= OID: iso.3.6.1.6.3.1.1.5.5 iso.3.6.1.4.1.9.2.1.5.0 = IpAddress: 192.168.200.4 iso.3.6.1.4.1.9.9.412.1.1.1.0 $ 2014-07-31 07:30:27 NET-SNMP version 5.4.3 Stopped. Stopping snmptrapd Do you have a solution, this issue recommendations

May 14 10:58:54 localhost snmptrapd[6455]: No access configuration - dropping trap.

2014-05-14 Thread andrewarnier
Hi all, I have follow the guild (http://www.snmptt.org/docs/snmptt.shtml#Installation-Overview )to install snmptt I want to receive traps with snmptrapd, but It doesn't work. This demon don't print anything to snmptt.log I find the msg :" localhost snmptrapd[19079]: No acces

Re: snmptrapd does not write to log after logrotate

2014-03-31 Thread Joel Hansell
Hi Stefan, If you issue a SIGHUP (Hangup signal) to the snmptrapd process, it will re-read its config and also start logging to the rotated (empty) file. You should add this step to the logrotate job. Watch out for a bug in some older versions (5.6.1.1 notably) where snmptrapd will fail to re

snmptrapd does not write to log after logrotate

2014-03-31 Thread Stefan Billeb
Hello, I am using snmptrapd along with snmptt on my server. I recently did the following configuration on my server: * Set the listening of snmptrapd to 0.0.0.0 udp/1602 in the init-script * Duplicating incoming snmp traps with "samplicate", sent to own server ip/1602 and othe

snmptrapd custom output format.

2014-03-02 Thread ja ja
Hi. I want to make custom output format for trap. Here is my current configure : /etc/snmp/snmptrapd.conf authCommunity log,execute public format1 %l-%m-%y %h:%j:%k ZBXTRAP %B %v\n /etc/default/snmpd TRAPDRUN=yes TRAPDOPTS='-Lf /var/log/snmp/trap.log -p /var/run/snmptrapd.pid -OanUb -n' snmp v

  1   2   3   4   5   6   7   8   9   10   >